@inkog-io/mcp 1.0.0

package/dist/tools/explain.js

@@ -0,0 +1,202 @@
+/**
+ * inkog_explain_finding Tool
+ *
+ * P1 - Finding Explanation and Remediation Guidance
+ *
+ * Provides detailed explanations for security findings including:
+ * - What the vulnerability is
+ * - Why it's dangerous
+ * - How to fix it
+ * - Code examples (vulnerable vs secure)
+ */
+import { z } from 'zod';
+import { getClient, InkogAuthError, InkogNetworkError } from '../api/client.js';
+// =============================================================================
+// Schema
+// =============================================================================
+const ExplainArgsSchema = z
+    .object({
+    finding_id: z
+        .string()
+        .optional()
+        .describe('Finding ID from scan results (e.g., "f8a3b2c1")'),
+    pattern: z
+        .string()
+        .optional()
+        .describe('Pattern name: prompt-injection, infinite-loop, sql-injection-llm, token-bombing, hardcoded-credentials, missing-rate-limits, recursive-delegation, etc.'),
+})
+    .refine((data) => data.finding_id !== undefined || data.pattern !== undefined, {
+    message: 'Either finding_id or pattern must be provided',
+});
+// =============================================================================
+// Helpers
+// =============================================================================
+function formatSeverityBadge(severity) {
+    switch (severity) {
+        case 'CRITICAL':
+            return '🔴 CRITICAL';
+        case 'HIGH':
+            return '🟠 HIGH';
+        case 'MEDIUM':
+            return '🟡 MEDIUM';
+        case 'LOW':
+            return '🟢 LOW';
+        default:
+            return severity;
+    }
+}
+function formatRiskTier(tier) {
+    switch (tier) {
+        case 'vulnerability':
+            return '🔴 Exploitable Vulnerability';
+        case 'risk_pattern':
+            return '🟠 Risk Pattern';
+        case 'hardening':
+            return '🟡 Hardening Recommendation';
+        default:
+            return tier;
+    }
+}
+// =============================================================================
+// Handler
+// =============================================================================
+async function explainHandler(rawArgs) {
+    // Validate arguments
+    const parseResult = ExplainArgsSchema.safeParse(rawArgs);
+    if (!parseResult.success) {
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: `Invalid arguments: ${parseResult.error.message}\n\nProvide either finding_id (from scan results) or pattern name.`,
+                },
+            ],
+            isError: true,
+        };
+    }
+    const args = parseResult.data;
+    try {
+        // Call Inkog API
+        const client = getClient();
+        const explainOptions = {};
+        if (args.finding_id !== undefined) {
+            explainOptions.findingId = args.finding_id;
+        }
+        if (args.pattern !== undefined) {
+            explainOptions.pattern = args.pattern;
+        }
+        const response = await client.explainFinding(explainOptions);
+        // Build formatted output
+        let output = '╔══════════════════════════════════════════════════════╗\n';
+        output += '║           📖 Security Finding Explanation             ║\n';
+        output += '╚══════════════════════════════════════════════════════╝\n\n';
+        // Title and metadata
+        output += `🔍 ${response.title}\n`;
+        output += `   Pattern: ${response.pattern}\n`;
+        output += `   Severity: ${formatSeverityBadge(response.severity)}\n`;
+        output += `   Category: ${formatRiskTier(response.riskTier)}\n`;
+        if (response.cwe !== undefined) {
+            output += `   CWE: ${response.cwe}\n`;
+        }
+        if (response.owaspLlm !== undefined) {
+            output += `   OWASP LLM: ${response.owaspLlm}\n`;
+        }
+        output += '\n';
+        // Description
+        output += '━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n\n';
+        output += '📝 DESCRIPTION\n\n';
+        output += response.description + '\n\n';
+        // Explanation
+        output += '━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n\n';
+        output += '🔬 WHY THIS IS DANGEROUS\n\n';
+        output += response.explanation + '\n\n';
+        // Impact
+        output += '━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n\n';
+        output += '💥 POTENTIAL IMPACT\n\n';
+        output += response.impact + '\n\n';
+        // Remediation steps
+        output += '━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n\n';
+        output += '🔧 HOW TO FIX\n\n';
+        for (const step of response.remediationSteps) {
+            output += `${step.order}. ${step.description}\n`;
+            if (step.codeExample !== undefined) {
+                const lang = step.language ?? '';
+                output += `\n\`\`\`${lang}\n${step.codeExample}\n\`\`\`\n\n`;
+            }
+        }
+        // Code examples
+        if (response.codeExamples !== undefined) {
+            output += '━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n\n';
+            output += '📝 CODE EXAMPLES\n\n';
+            output += '❌ Vulnerable:\n';
+            output += `\`\`\`${response.codeExamples.language}\n${response.codeExamples.vulnerable}\n\`\`\`\n\n`;
+            output += '✅ Secure:\n';
+            output += `\`\`\`${response.codeExamples.language}\n${response.codeExamples.secure}\n\`\`\`\n\n`;
+        }
+        // References
+        if (response.references.length > 0) {
+            output += '━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n\n';
+            output += '📚 REFERENCES\n\n';
+            for (const ref of response.references) {
+                output += `• ${ref}\n`;
+            }
+        }
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: output,
+                },
+            ],
+        };
+    }
+    catch (error) {
+        if (error instanceof InkogAuthError) {
+            return {
+                content: [
+                    {
+                        type: 'text',
+                        text: '🔐 API Key Required\n\nGet your free key at https://app.inkog.io',
+                    },
+                ],
+                isError: true,
+            };
+        }
+        if (error instanceof InkogNetworkError) {
+            return {
+                content: [
+                    {
+                        type: 'text',
+                        text: `Network error: ${error.message}`,
+                    },
+                ],
+                isError: true,
+            };
+        }
+        throw error;
+    }
+}
+// =============================================================================
+// Tool Definition
+// =============================================================================
+export const explainTool = {
+    tool: {
+        name: 'inkog_explain_finding',
+        description: 'Get detailed explanation and remediation guidance for a security finding or pattern. Includes what the issue is, why it\'s dangerous, step-by-step fixes, and code examples.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                finding_id: {
+                    type: 'string',
+                    description: 'Finding ID from scan results (e.g., "f8a3b2c1")',
+                },
+                pattern: {
+                    type: 'string',
+                    description: 'Pattern name: prompt-injection, infinite-loop, sql-injection-llm, token-bombing, hardcoded-credentials, missing-rate-limits, recursive-delegation, etc.',
+                },
+            },
+        },
+    },
+    handler: explainHandler,
+};
+//# sourceMappingURL=explain.js.map

package/dist/tools/explain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"explain.js","sourceRoot":"","sources":["../../src/tools/explain.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAGhF,gFAAgF;AAChF,SAAS;AACT,gFAAgF;AAEhF,MAAM,iBAAiB,GAAG,CAAC;KACxB,MAAM,CAAC;IACN,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,iDAAiD,CAAC;IAC9D,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,yJAAyJ,CAC1J;CACJ,CAAC;KACD,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE;IAC7E,OAAO,EAAE,+CAA+C;CACzD,CAAC,CAAC;AAIL,gFAAgF;AAChF,UAAU;AACV,gFAAgF;AAEhF,SAAS,mBAAmB,CAAC,QAAgB;IAC3C,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,UAAU;YACb,OAAO,aAAa,CAAC;QACvB,KAAK,MAAM;YACT,OAAO,SAAS,CAAC;QACnB,KAAK,QAAQ;YACX,OAAO,WAAW,CAAC;QACrB,KAAK,KAAK;YACR,OAAO,QAAQ,CAAC;QAClB;YACE,OAAO,QAAQ,CAAC;IACpB,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,eAAe;YAClB,OAAO,8BAA8B,CAAC;QACxC,KAAK,cAAc;YACjB,OAAO,iBAAiB,CAAC;QAC3B,KAAK,WAAW;YACd,OAAO,6BAA6B,CAAC;QACvC;YACE,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,UAAU;AACV,gFAAgF;AAEhF,KAAK,UAAU,cAAc,CAAC,OAAgC;IAC5D,qBAAqB;IACrB,MAAM,WAAW,GAAG,iBAAiB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACzD,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;QACzB,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,sBAAsB,WAAW,CAAC,KAAK,CAAC,OAAO,oEAAoE;iBAC1H;aACF;YACD,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAgB,WAAW,CAAC,IAAI,CAAC;IAE3C,IAAI,CAAC;QACH,iBAAiB;QACjB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,cAAc,GAA6C,EAAE,CAAC;QACpE,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YAClC,cAAc,CAAC,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC;QAC7C,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAC/B,cAAc,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QACxC,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC;QAE7D,yBAAyB;QACzB,IAAI,MAAM,GAAG,4DAA4D,CAAC;QAC1E,MAAM,IAAI,6DAA6D,CAAC;QACxE,MAAM,IAAI,8DAA8D,CAAC;QAEzE,qBAAqB;QACrB,MAAM,IAAI,MAAM,QAAQ,CAAC,KAAK,IAAI,CAAC;QACnC,MAAM,IAAI,eAAe,QAAQ,CAAC,OAAO,IAAI,CAAC;QAC9C,MAAM,IAAI,gBAAgB,mBAAmB,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;QACrE,MAAM,IAAI,gBAAgB,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;QAEhE,IAAI,QAAQ,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,IAAI,WAAW,QAAQ,CAAC,GAAG,IAAI,CAAC;QACxC,CAAC;QACD,IAAI,QAAQ,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YACpC,MAAM,IAAI,iBAAiB,QAAQ,CAAC,QAAQ,IAAI,CAAC;QACnD,CAAC;QAED,MAAM,IAAI,IAAI,CAAC;QAEf,cAAc;QACd,MAAM,IAAI,6CAA6C,CAAC;QACxD,MAAM,IAAI,oBAAoB,CAAC;QAC/B,MAAM,IAAI,QAAQ,CAAC,WAAW,GAAG,MAAM,CAAC;QAExC,cAAc;QACd,MAAM,IAAI,6CAA6C,CAAC;QACxD,MAAM,IAAI,8BAA8B,CAAC;QACzC,MAAM,IAAI,QAAQ,CAAC,WAAW,GAAG,MAAM,CAAC;QAExC,SAAS;QACT,MAAM,IAAI,6CAA6C,CAAC;QACxD,MAAM,IAAI,yBAAyB,CAAC;QACpC,MAAM,IAAI,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC;QAEnC,oBAAoB;QACpB,MAAM,IAAI,6CAA6C,CAAC;QACxD,MAAM,IAAI,mBAAmB,CAAC;QAE9B,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,gBAAgB,EAAE,CAAC;YAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,WAAW,IAAI,CAAC;YACjD,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;gBACnC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;gBACjC,MAAM,IAAI,WAAW,IAAI,KAAK,IAAI,CAAC,WAAW,cAAc,CAAC;YAC/D,CAAC;QACH,CAAC;QAED,gBAAgB;QAChB,IAAI,QAAQ,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YACxC,MAAM,IAAI,6CAA6C,CAAC;YACxD,MAAM,IAAI,sBAAsB,CAAC;YAEjC,MAAM,IAAI,iBAAiB,CAAC;YAC5B,MAAM,IAAI,SAAS,QAAQ,CAAC,YAAY,CAAC,QAAQ,KAAK,QAAQ,CAAC,YAAY,CAAC,UAAU,cAAc,CAAC;YAErG,MAAM,IAAI,aAAa,CAAC;YACxB,MAAM,IAAI,SAAS,QAAQ,CAAC,YAAY,CAAC,QAAQ,KAAK,QAAQ,CAAC,YAAY,CAAC,MAAM,cAAc,CAAC;QACnG,CAAC;QAED,aAAa;QACb,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,6CAA6C,CAAC;YACxD,MAAM,IAAI,mBAAmB,CAAC;YAC9B,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;gBACtC,MAAM,IAAI,KAAK,GAAG,IAAI,CAAC;YACzB,CAAC;QACH,CAAC;QAED,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,MAAM;iBACb;aACF;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,cAAc,EAAE,CAAC;YACpC,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,kEAAkE;qBACzE;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,YAAY,iBAAiB,EAAE,CAAC;YACvC,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,kBAAkB,KAAK,CAAC,OAAO,EAAE;qBACxC;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,kBAAkB;AAClB,gFAAgF;AAEhF,MAAM,CAAC,MAAM,WAAW,GAAmB;IACzC,IAAI,EAAE;QACJ,IAAI,EAAE,uBAAuB;QAC7B,WAAW,EACT,8KAA8K;QAChL,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,UAAU,EAAE;oBACV,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,iDAAiD;iBAC/D;gBACD,OAAO,EAAE;oBACP,IAAI,EAAE,QAAQ;oBACd,WAAW,EACT,yJAAyJ;iBAC5J;aACF;SACF;KACF;IACD,OAAO,EAAE,cAAc;CACxB,CAAC"}

package/dist/tools/governance.d.ts

@@ -0,0 +1,16 @@
+/**
+ * inkog_verify_governance Tool
+ *
+ * P0 - AGENTS.md Governance Verification (THE MOAT)
+ *
+ * Validates that AGENTS.md declarations match actual code behavior.
+ * Detects governance mismatches like:
+ * - "Read-only" declared but code writes data
+ * - "No external API" declared but code makes HTTP requests
+ * - "Human approval required" declared but no approval gates in code
+ *
+ * This is Inkog's unique differentiator - no other tool does this.
+ */
+import type { ToolDefinition } from './index.js';
+export declare const governanceTool: ToolDefinition;
+//# sourceMappingURL=governance.d.ts.map

package/dist/tools/governance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"governance.d.ts","sourceRoot":"","sources":["../../src/tools/governance.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAOH,OAAO,KAAK,EAAE,cAAc,EAAc,MAAM,YAAY,CAAC;AAqM7D,eAAO,MAAM,cAAc,EAAE,cAiB5B,CAAC"}

package/dist/tools/governance.js

@@ -0,0 +1,200 @@
+/**
+ * inkog_verify_governance Tool
+ *
+ * P0 - AGENTS.md Governance Verification (THE MOAT)
+ *
+ * Validates that AGENTS.md declarations match actual code behavior.
+ * Detects governance mismatches like:
+ * - "Read-only" declared but code writes data
+ * - "No external API" declared but code makes HTTP requests
+ * - "Human approval required" declared but no approval gates in code
+ *
+ * This is Inkog's unique differentiator - no other tool does this.
+ */
+import { z } from 'zod';
+import { getClient, InkogAuthError, InkogNetworkError } from '../api/client.js';
+import { findAgentsMd, getRelativePaths, readDirectory } from '../utils/file-reader.js';
+// =============================================================================
+// Schema
+// =============================================================================
+const GovernanceArgsSchema = z.object({
+    path: z.string().describe('Path to directory containing AGENTS.md and agent code'),
+});
+// =============================================================================
+// Helpers
+// =============================================================================
+function formatMismatch(mismatch) {
+    const icon = mismatch.severity === 'CRITICAL'
+        ? '🔴'
+        : mismatch.severity === 'HIGH'
+            ? '🟠'
+            : mismatch.severity === 'MEDIUM'
+                ? '🟡'
+                : '🟢';
+    let output = `${icon} GOVERNANCE MISMATCH\n`;
+    output += `   📍 ${mismatch.file}:${mismatch.line}\n`;
+    output += `   📜 Declared: "${mismatch.declared}"\n`;
+    output += `   ⚠️  Actual: "${mismatch.actual}"\n`;
+    output += `   💬 ${mismatch.description}`;
+    return output;
+}
+function formatCapabilityList(items, title, icon) {
+    if (items.length === 0) {
+        return '';
+    }
+    let output = `${icon} ${title}:\n`;
+    for (const item of items) {
+        output += `   • ${item}\n`;
+    }
+    return output + '\n';
+}
+// =============================================================================
+// Handler
+// =============================================================================
+async function governanceHandler(rawArgs) {
+    // Validate arguments
+    const parseResult = GovernanceArgsSchema.safeParse(rawArgs);
+    if (!parseResult.success) {
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: `Invalid arguments: ${parseResult.error.message}`,
+                },
+            ],
+            isError: true,
+        };
+    }
+    const args = parseResult.data;
+    try {
+        // Check for AGENTS.md
+        const agentsMdPath = findAgentsMd(args.path);
+        // Read files from path
+        const readResult = readDirectory(args.path);
+        if (readResult.files.length === 0) {
+            return {
+                content: [
+                    {
+                        type: 'text',
+                        text: `No files found in: ${args.path}`,
+                    },
+                ],
+                isError: true,
+            };
+        }
+        // Get relative paths for cleaner output
+        const files = getRelativePaths(readResult.files, args.path);
+        // Call Inkog API
+        const client = getClient();
+        const response = await client.verifyGovernance(files);
+        // Build output
+        let output = '╔══════════════════════════════════════════════════════╗\n';
+        output += '║        🏛️  AGENTS.md Governance Verification          ║\n';
+        output += '╚══════════════════════════════════════════════════════╝\n\n';
+        // AGENTS.md status
+        if (response.hasAgentsMd) {
+            output += `✅ AGENTS.md found: ${response.agentsMdPath ?? agentsMdPath ?? 'AGENTS.md'}\n\n`;
+        }
+        else {
+            output += '⚠️  No AGENTS.md file found\n\n';
+            output +=
+                'AGENTS.md is a governance declaration file that describes what your agent\n';
+            output += 'can and cannot do. It helps ensure your agent behaves as documented.\n\n';
+            output += 'To create one, add an AGENTS.md file to your project root with:\n';
+            output += '- Capabilities: What the agent can do\n';
+            output += '- Limitations: What the agent cannot do\n';
+            output += '- Tools: What tools the agent has access to\n';
+            output += '- Security: Required security controls\n\n';
+            output +=
+                'Learn more: https://docs.inkog.io/governance/agents-md\n\n';
+        }
+        // Compliance score
+        output += `📊 Governance Score: ${response.complianceScore}/100\n\n`;
+        // Declared capabilities, limitations, tools
+        if (response.hasAgentsMd) {
+            output += '━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n\n';
+            output += '📜 DECLARED GOVERNANCE\n\n';
+            output += formatCapabilityList(response.declaredCapabilities, 'Capabilities', '✅');
+            output += formatCapabilityList(response.declaredLimitations, 'Limitations', '🚫');
+            output += formatCapabilityList(response.declaredTools, 'Tools', '🔧');
+        }
+        // Mismatches
+        if (response.mismatches.length > 0) {
+            output += '━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n\n';
+            output += `⚠️  GOVERNANCE MISMATCHES (${response.mismatches.length})\n\n`;
+            output += 'The following code behaviors do not match AGENTS.md declarations:\n\n';
+            for (const mismatch of response.mismatches) {
+                output += formatMismatch(mismatch) + '\n\n';
+            }
+        }
+        else if (response.hasAgentsMd) {
+            output += '━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n\n';
+            output += '✅ No governance mismatches detected!\n\n';
+            output += 'Your agent code aligns with its AGENTS.md declarations.\n\n';
+        }
+        // Recommendations
+        if (response.recommendation !== undefined) {
+            output += '━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n\n';
+            output += '💡 RECOMMENDATION\n\n';
+            output += response.recommendation + '\n';
+        }
+        // Footer
+        output += '\n━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n';
+        output += 'AGENTS.md verification powered by Inkog AI Security Platform\n';
+        output += 'Learn more: https://inkog.io/governance\n';
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: output,
+                },
+            ],
+        };
+    }
+    catch (error) {
+        if (error instanceof InkogAuthError) {
+            return {
+                content: [
+                    {
+                        type: 'text',
+                        text: '🔐 API Key Required\n\nTo use Inkog, you need an API key.\n\n1. Sign up for free at https://app.inkog.io\n2. Set your API key: export INKOG_API_KEY=sk_live_...\n3. Try again!',
+                    },
+                ],
+                isError: true,
+            };
+        }
+        if (error instanceof InkogNetworkError) {
+            return {
+                content: [
+                    {
+                        type: 'text',
+                        text: `Network error: ${error.message}\n\nPlease check your internet connection and try again.`,
+                    },
+                ],
+                isError: true,
+            };
+        }
+        throw error;
+    }
+}
+// =============================================================================
+// Tool Definition
+// =============================================================================
+export const governanceTool = {
+    tool: {
+        name: 'inkog_verify_governance',
+        description: "Validate that AGENTS.md declarations match actual code behavior. Detects governance mismatches like 'read-only declared but code writes data' or 'human approval required but no approval gates in code'. Essential for EU AI Act Article 14 compliance.",
+        inputSchema: {
+            type: 'object',
+            properties: {
+                path: {
+                    type: 'string',
+                    description: 'Path to directory containing AGENTS.md and agent code',
+                },
+            },
+            required: ['path'],
+        },
+    },
+    handler: governanceHandler,
+};
+//# sourceMappingURL=governance.js.map

package/dist/tools/governance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"governance.js","sourceRoot":"","sources":["../../src/tools/governance.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAEhF,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAGxF,gFAAgF;AAChF,SAAS;AACT,gFAAgF;AAEhF,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uDAAuD,CAAC;CACnF,CAAC,CAAC;AAIH,gFAAgF;AAChF,UAAU;AACV,gFAAgF;AAEhF,SAAS,cAAc,CAAC,QAA4B;IAClD,MAAM,IAAI,GACR,QAAQ,CAAC,QAAQ,KAAK,UAAU;QAC9B,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,QAAQ,CAAC,QAAQ,KAAK,MAAM;YAC5B,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,QAAQ,CAAC,QAAQ,KAAK,QAAQ;gBAC9B,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,IAAI,CAAC;IAEf,IAAI,MAAM,GAAG,GAAG,IAAI,wBAAwB,CAAC;IAC7C,MAAM,IAAI,SAAS,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI,IAAI,CAAC;IACtD,MAAM,IAAI,oBAAoB,QAAQ,CAAC,QAAQ,KAAK,CAAC;IACrD,MAAM,IAAI,mBAAmB,QAAQ,CAAC,MAAM,KAAK,CAAC;IAClD,MAAM,IAAI,SAAS,QAAQ,CAAC,WAAW,EAAE,CAAC;IAE1C,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAe,EAAE,KAAa,EAAE,IAAY;IACxE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,MAAM,GAAG,GAAG,IAAI,IAAI,KAAK,KAAK,CAAC;IACnC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,QAAQ,IAAI,IAAI,CAAC;IAC7B,CAAC;IACD,OAAO,MAAM,GAAG,IAAI,CAAC;AACvB,CAAC;AAED,gFAAgF;AAChF,UAAU;AACV,gFAAgF;AAEhF,KAAK,UAAU,iBAAiB,CAAC,OAAgC;IAC/D,qBAAqB;IACrB,MAAM,WAAW,GAAG,oBAAoB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAC5D,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;QACzB,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,sBAAsB,WAAW,CAAC,KAAK,CAAC,OAAO,EAAE;iBACxD;aACF;YACD,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAmB,WAAW,CAAC,IAAI,CAAC;IAE9C,IAAI,CAAC;QACH,sBAAsB;QACtB,MAAM,YAAY,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE7C,uBAAuB;QACvB,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE5C,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClC,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,sBAAsB,IAAI,CAAC,IAAI,EAAE;qBACxC;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,wCAAwC;QACxC,MAAM,KAAK,GAAG,gBAAgB,CAAC,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAE5D,iBAAiB;QACjB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAEtD,eAAe;QACf,IAAI,MAAM,GAAG,4DAA4D,CAAC;QAC1E,MAAM,IAAI,8DAA8D,CAAC;QACzE,MAAM,IAAI,8DAA8D,CAAC;QAEzE,mBAAmB;QACnB,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;YACzB,MAAM,IAAI,sBAAsB,QAAQ,CAAC,YAAY,IAAI,YAAY,IAAI,WAAW,MAAM,CAAC;QAC7F,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,iCAAiC,CAAC;YAC5C,MAAM;gBACJ,6EAA6E,CAAC;YAChF,MAAM,IAAI,0EAA0E,CAAC;YACrF,MAAM,IAAI,mEAAmE,CAAC;YAC9E,MAAM,IAAI,yCAAyC,CAAC;YACpD,MAAM,IAAI,2CAA2C,CAAC;YACtD,MAAM,IAAI,+CAA+C,CAAC;YAC1D,MAAM,IAAI,4CAA4C,CAAC;YACvD,MAAM;gBACJ,4DAA4D,CAAC;QACjE,CAAC;QAED,mBAAmB;QACnB,MAAM,IAAI,wBAAwB,QAAQ,CAAC,eAAe,UAAU,CAAC;QAErE,4CAA4C;QAC5C,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;YACzB,MAAM,IAAI,6CAA6C,CAAC;YACxD,MAAM,IAAI,4BAA4B,CAAC;YAEvC,MAAM,IAAI,oBAAoB,CAAC,QAAQ,CAAC,oBAAoB,EAAE,cAAc,EAAE,GAAG,CAAC,CAAC;YACnF,MAAM,IAAI,oBAAoB,CAAC,QAAQ,CAAC,mBAAmB,EAAE,aAAa,EAAE,IAAI,CAAC,CAAC;YAClF,MAAM,IAAI,oBAAoB,CAAC,QAAQ,CAAC,aAAa,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QACxE,CAAC;QAED,aAAa;QACb,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,6CAA6C,CAAC;YACxD,MAAM,IAAI,8BAA8B,QAAQ,CAAC,UAAU,CAAC,MAAM,OAAO,CAAC;YAC1E,MAAM,IAAI,uEAAuE,CAAC;YAElF,KAAK,MAAM,QAAQ,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;gBAC3C,MAAM,IAAI,cAAc,CAAC,QAAQ,CAAC,GAAG,MAAM,CAAC;YAC9C,CAAC;QACH,CAAC;aAAM,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;YAChC,MAAM,IAAI,6CAA6C,CAAC;YACxD,MAAM,IAAI,0CAA0C,CAAC;YACrD,MAAM,IAAI,6DAA6D,CAAC;QAC1E,CAAC;QAED,kBAAkB;QAClB,IAAI,QAAQ,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YAC1C,MAAM,IAAI,6CAA6C,CAAC;YACxD,MAAM,IAAI,uBAAuB,CAAC;YAClC,MAAM,IAAI,QAAQ,CAAC,cAAc,GAAG,IAAI,CAAC;QAC3C,CAAC;QAED,SAAS;QACT,MAAM,IAAI,6CAA6C,CAAC;QACxD,MAAM,IAAI,gEAAgE,CAAC;QAC3E,MAAM,IAAI,2CAA2C,CAAC;QAEtD,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,MAAM;iBACb;aACF;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,cAAc,EAAE,CAAC;YACpC,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,gLAAgL;qBACvL;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,YAAY,iBAAiB,EAAE,CAAC;YACvC,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,kBAAkB,KAAK,CAAC,OAAO,0DAA0D;qBAChG;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,kBAAkB;AAClB,gFAAgF;AAEhF,MAAM,CAAC,MAAM,cAAc,GAAmB;IAC5C,IAAI,EAAE;QACJ,IAAI,EAAE,yBAAyB;QAC/B,WAAW,EACT,0PAA0P;QAC5P,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,IAAI,EAAE;oBACJ,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,uDAAuD;iBACrE;aACF;YACD,QAAQ,EAAE,CAAC,MAAM,CAAC;SACnB;KACF;IACD,OAAO,EAAE,iBAAiB;CAC3B,CAAC"}

package/dist/tools/index.d.ts

@@ -0,0 +1,50 @@
+/**
+ * Tool Registry
+ *
+ * Central registry for all Inkog MCP tools.
+ * Each tool is a self-contained module that registers itself here.
+ *
+ * Architecture:
+ * - Tools are lazy-loaded to improve startup time
+ * - Each tool defines its own schema and handler
+ * - Registry provides a unified interface for the MCP server
+ */
+import type { Tool } from '@modelcontextprotocol/sdk/types.js';
+export interface ToolDefinition {
+    /** Tool metadata for MCP */
+    tool: Tool;
+    /** Handler function that processes tool calls */
+    handler: ToolHandler;
+}
+export type ToolHandler = (args: Record<string, unknown>) => Promise<ToolResult>;
+export interface ToolResult {
+    content: {
+        type: 'text' | 'image' | 'resource';
+        text?: string;
+        data?: string;
+        mimeType?: string;
+    }[];
+    isError?: boolean;
+}
+/**
+ * Register a tool with the registry
+ */
+export declare function registerTool(definition: ToolDefinition): void;
+/**
+ * Get a tool by name
+ */
+export declare function getTool(name: string): ToolDefinition | undefined;
+/**
+ * Get all registered tools
+ */
+export declare function getAllTools(): ToolDefinition[];
+/**
+ * Get tool metadata for MCP ListTools
+ */
+export declare function getToolList(): Tool[];
+/**
+ * Call a tool by name
+ */
+export declare function callTool(name: string, args: Record<string, unknown>): Promise<ToolResult>;
+export declare const registeredToolCount: number;
+//# sourceMappingURL=index.d.ts.map

package/dist/tools/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,oCAAoC,CAAC;AAM/D,MAAM,WAAW,cAAc;IAC7B,4BAA4B;IAC5B,IAAI,EAAE,IAAI,CAAC;IACX,iDAAiD;IACjD,OAAO,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,MAAM,WAAW,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;AAEjF,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE;QACP,IAAI,EAAE,MAAM,GAAG,OAAO,GAAG,UAAU,CAAC;QACpC,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,EAAE,CAAC;IACJ,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAQD;;GAEG;AACH,wBAAgB,YAAY,CAAC,UAAU,EAAE,cAAc,GAAG,IAAI,CAE7D;AAED;;GAEG;AACH,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAEhE;AAED;;GAEG;AACH,wBAAgB,WAAW,IAAI,cAAc,EAAE,CAE9C;AAED;;GAEG;AACH,wBAAgB,WAAW,IAAI,IAAI,EAAE,CAEpC;AAED;;GAEG;AACH,wBAAsB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,CA6B/F;AA2BD,eAAO,MAAM,mBAAmB,QAAoB,CAAC"}

package/dist/tools/index.js

@@ -0,0 +1,94 @@
+/**
+ * Tool Registry
+ *
+ * Central registry for all Inkog MCP tools.
+ * Each tool is a self-contained module that registers itself here.
+ *
+ * Architecture:
+ * - Tools are lazy-loaded to improve startup time
+ * - Each tool defines its own schema and handler
+ * - Registry provides a unified interface for the MCP server
+ */
+// =============================================================================
+// Registry
+// =============================================================================
+const toolRegistry = new Map();
+/**
+ * Register a tool with the registry
+ */
+export function registerTool(definition) {
+    toolRegistry.set(definition.tool.name, definition);
+}
+/**
+ * Get a tool by name
+ */
+export function getTool(name) {
+    return toolRegistry.get(name);
+}
+/**
+ * Get all registered tools
+ */
+export function getAllTools() {
+    return Array.from(toolRegistry.values());
+}
+/**
+ * Get tool metadata for MCP ListTools
+ */
+export function getToolList() {
+    return getAllTools().map((def) => def.tool);
+}
+/**
+ * Call a tool by name
+ */
+export async function callTool(name, args) {
+    const tool = getTool(name);
+    if (tool === undefined) {
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: `Error: Unknown tool "${name}"`,
+                },
+            ],
+            isError: true,
+        };
+    }
+    try {
+        return await tool.handler(args);
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: `Error: ${message}`,
+                },
+            ],
+            isError: true,
+        };
+    }
+}
+// =============================================================================
+// Tool Registration
+// =============================================================================
+// Import and register all tools
+// This is done at module load time to ensure all tools are available
+import { scanTool } from './scan.js';
+import { governanceTool } from './governance.js';
+import { complianceTool } from './compliance.js';
+import { explainTool } from './explain.js';
+import { auditMcpTool } from './audit-mcp.js';
+import { mlbomTool } from './mlbom.js';
+import { auditA2aTool } from './audit-a2a.js';
+// Register all tools
+registerTool(scanTool);
+registerTool(governanceTool);
+registerTool(complianceTool);
+registerTool(explainTool);
+registerTool(auditMcpTool);
+registerTool(mlbomTool);
+registerTool(auditA2aTool);
+// Export tool count for debugging
+export const registeredToolCount = toolRegistry.size;
+//# sourceMappingURL=index.js.map

package/dist/tools/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AA2BH,gFAAgF;AAChF,WAAW;AACX,gFAAgF;AAEhF,MAAM,YAAY,GAAG,IAAI,GAAG,EAA0B,CAAC;AAEvD;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,UAA0B;IACrD,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;AACrD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,OAAO,CAAC,IAAY;IAClC,OAAO,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAChC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW;IACzB,OAAO,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC;AAC3C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW;IACzB,OAAO,WAAW,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAC9C,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAY,EAAE,IAA6B;IACxE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE3B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,wBAAwB,IAAI,GAAG;iBACtC;aACF;YACD,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,UAAU,OAAO,EAAE;iBAC1B;aACF;YACD,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,oBAAoB;AACpB,gFAAgF;AAEhF,gCAAgC;AAChC,qEAAqE;AAErE,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C,qBAAqB;AACrB,YAAY,CAAC,QAAQ,CAAC,CAAC;AACvB,YAAY,CAAC,cAAc,CAAC,CAAC;AAC7B,YAAY,CAAC,cAAc,CAAC,CAAC;AAC7B,YAAY,CAAC,WAAW,CAAC,CAAC;AAC1B,YAAY,CAAC,YAAY,CAAC,CAAC;AAC3B,YAAY,CAAC,SAAS,CAAC,CAAC;AACxB,YAAY,CAAC,YAAY,CAAC,CAAC;AAE3B,kCAAkC;AAClC,MAAM,CAAC,MAAM,mBAAmB,GAAG,YAAY,CAAC,IAAI,CAAC"}

package/dist/tools/mlbom.d.ts

@@ -0,0 +1,18 @@
+/**
+ * inkog_generate_mlbom Tool
+ *
+ * P1 - Machine Learning Bill of Materials (MLBOM) Generation
+ *
+ * Generates a comprehensive inventory of all ML/AI components in an agent system:
+ * - Models (OpenAI, Anthropic, local models, etc.)
+ * - Tools (function calls, APIs, integrations)
+ * - Data sources (databases, vector stores, file systems)
+ * - Frameworks (LangChain, CrewAI, LangGraph, etc.)
+ * - Dependencies (pip, npm packages)
+ *
+ * Output formats: CycloneDX (recommended), SPDX, JSON
+ * Gartner-recommended capability for AI supply chain visibility.
+ */
+import type { ToolDefinition } from './index.js';
+export declare const mlbomTool: ToolDefinition;
+//# sourceMappingURL=mlbom.d.ts.map

package/dist/tools/mlbom.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mlbom.d.ts","sourceRoot":"","sources":["../../src/tools/mlbom.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAOH,OAAO,KAAK,EAAE,cAAc,EAAc,MAAM,YAAY,CAAC;AAyV7D,eAAO,MAAM,SAAS,EAAE,cA4BvB,CAAC"}